http://blog.powershell.no/2009/09/13/how-to-use-the-new-active-directory-recycle-bin-feature/ On Windows PowerShell and other admin-related topics Fri, 09 Dec 2011 10:08:22 +0000 hourly 1 http://wordpress.com/ http://blog.powershell.no/2009/09/13/how-to-use-the-new-active-directory-recycle-bin-feature/#comment-1056 Fri, 11 Nov 2011 15:54:33 +0000 http://janegilring.wordpress.com/2009/09/13/how-to-use-the-new-active-directory-recycle-bin-feature/#comment-1056 The AD recycle bin isn’t as convenient and effective as it sounds and here’s a quick rundown as to why: For starters, it won’t work unless all domain controllers have been upgraded to Windows Server 2008 R2, which means that getting the feature might wind up costing more than a 3rd party tool. Also, once it’s turned on, it cant be turned off, creating problems in instances where compliance regulations don’t permit preservation of personally identifiable info. Lastly, while deleted objects can be restored, previous modifications cant be restored. It other words, administrators trying to salvage Active Directory by reverting unwanted modifications will not be able to roll back because previous values of AD attributes were already overwritten. That being the case, I always recommend a third-party solution for roll back. Take a look at netwrix’s free ad object restore wizard or Quest’s object restore. Both options work well and provide much more capabilities than the native recycle bin.

]]>